{"schemaVersion":3,"id":"CVE-2007-1499","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Microsoft Internet Explorer 7.0 on Windows XP and Vista allows remote attackers to conduct phishing attacks and possibly execute arbitrary code via a res: URI to navcancl.htm with an arbitrary URL as an argument, which displays the URL in the location bar of the \"Navigation Canceled\" page and injects the script into the \"Refresh the page\" link, aka Navigation Cancel Page Spoofing Vulnerability.\"","dates":{"published":"2007-03-17T10:00:00.000Z","modified":"2024-08-07T12:59:08.795Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.3,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.29973,"percentile":0.98198,"severity":"high","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.19299999999999873,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.2978},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.29973,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.29973,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.29973,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.29973,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.29973,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.29973,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.29973,"percentile":0.98198}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.2978,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.29973,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.29973,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.29973,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.29973,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.29973,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.29973,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.29973,"percentile":0.98198}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"29741","name":"Microsoft Internet Explorer 7 - NavCancel.HTM Cross-Site Scripting","source":"exploit-database","url":"https://www.exploit-db.com/exploits/29741","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"windows","file":"exploits/windows/remote/29741.txt","codes":["CVE-2007-1499","OSVDB-34077"]},"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/79.html"}],"affected":[{"vendor":"microsoft","product":"ie","name":"ie","label":"ie","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.0","eol":{"isEol":true,"eolDate":"2023-10-10T00:00:00.000Z","matchMethod":"alias_exact","cycle":{"name":"7","label":"7","eolFrom":"2023-10-10T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"internet-explorer","label":"Internet Explorer","category":"app"}},"hubHref":"/vendor/microsoft/ie"}],"affectedCount":1,"eol":{"hasEol":true,"count":1},"references":[{"url":"http://www.securityfocus.com/bid/22966","label":"www.securityfocus.com/bid/22966","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://securityreason.com/securityalert/2448","label":"securityreason.com/securityalert/2448","hostname":"securityreason.com","tags":["Third Party Advisory","X Refsource SREASON"]},{"url":"http://osvdb.org/35352","label":"osvdb.org/35352","hostname":"osvdb.org","tags":["VDB Entry","X Refsource OSVDB"]},{"url":"http://www.vupen.com/english/advisories/2007/0946","label":"www.vupen.com/english/advisories/2007/0946","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1715","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1715","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://secunia.com/advisories/25627","label":"secunia.com/advisories/25627","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://aviv.raffon.net/2007/03/14/PhishingUsingIE7LocalResourceVulnerability.aspx","label":"aviv.raffon.net/2007/03/14/PhishingUsingIE7LocalResourceVulnerability.aspx","hostname":"aviv.raffon.net","tags":["X Refsource MISC","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/471947/100/0/threaded","label":"www.securityfocus.com/archive/1/471947/100/0/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource HP"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/33026","label":"exchange.xforce.ibmcloud.com/vulnerabilities/33026","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://securitytracker.com/id?1018235","label":"securitytracker.com/id?1018235","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://secunia.com/advisories/24535","label":"secunia.com/advisories/24535","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/2153","label":"www.vupen.com/english/advisories/2007/2153","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-163A.html","label":"www.us-cert.gov/cas/techalerts/TA07-163A.html","hostname":"www.us-cert.gov","tags":["Third Party Advisory","X Refsource CERT","US Government Resource"]},{"url":"http://news.com.com/2100-1002_3-6167410.html","label":"news.com.com/2100-1002_3-6167410.html","hostname":"news.com.com","tags":["X Refsource MISC"]},{"url":"http://www.securityfocus.com/archive/1/462939/100/0/threaded","label":"www.securityfocus.com/archive/1/462939/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://www.securityfocus.com/archive/1/462945/100/0/threaded","label":"www.securityfocus.com/archive/1/462945/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-033","label":"docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-033","hostname":"docs.microsoft.com","tags":["Vendor Advisory","X Refsource MS"]},{"url":"http://www.securityfocus.com/archive/1/462833/100/0/threaded","label":"www.securityfocus.com/archive/1/462833/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":["CVE-2007-1752"],"related":[]},"timeline":[{"kind":"published","date":"2007-03-17T10:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T12:59:08.795Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":33,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T16:33:24.622Z","stale":false,"partial":false}}